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recording in the key escrow database the randomly selected trap door encryption- 
decryption function pair along with the encrypted token; and 

\inverting the created set of N trap door encryption-decryption function pairs and the 
randomly^ selected trap door encryption-decryption function pair along with the encrypted 
token to identify the decryption key. 



2. (Amended) A method for storing and withdrawing a decryption key from a 
key escrow database as in Claim 1, further comprising: 

encrypting me created set of N trap door encryption-decryption function pairs and the 
randomly selected trapdoor function along with the decryption key prior to recording in the 
key escrow database. 

3. (Amended) \ The method for storing and withdrawing a decryption key from 
key escrow database as in Claim 1 , further comprising: 

fu: 



randomly selecting at tfte receiver an additional trap door encryption-decryption 
function pair and the correspondingstoken; 

adding randomization information to the corresponding token of the additional 
i ^'selected trap door encryption-decryptioirrfunction pair; 

concatenating the results of thev adding of randomization information to the 
corresponding token of the additional selected trap door encryption-decryption function pair 
to the corresponding token of the randomly selected first trap door encryption-decryption 
function pair; and 

encrypting the concatenating results usinjk the decryption key from the additional 
selected trap door encryption-decryption function paiV 



4. (Amended) The method for storing and withdrawing a decryption key from 
a key escrow database as in Claim 1 further comprising adding signature information at the 
receiver to the selected trap door encryption-decryption function pair to distinguish valid 
subsequent decodings of the selected trap door encryption-decryption function pair from 
invalid decodings. 
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5. ^S^Amended) The method for storing and withdrawing a decryption key from 
a key escrow database^a§-4n Claim 1, wherein encrypting the corresponding token of a 
selected trap door encryption-decty^ticm function pair comprises calculating a cryptogram 
utilizing the corresponding token and includmg-a^iecryption key along with randomization 
information and signature information. 
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(A (Amended) A method for storing and withdrawing decryption keys from a 
key escrow\database, comprising: 

generating, in accordance with a selected encryption function, a set of N 
cryptogram/decryption key pairs, each pair having a corresponding token; 

transmitting the set of N cryptogram/decryption key pairs and the corresponding 
token to a receiver; \ 

randomly selecting at the receiver one of the cryptogram/decryption key pairs along 
with the corresponding token; 

decrypting the ranatomly selected cryptogram utilizing the corresponding token to 
obtain a corresponding decryption key; 

generating a cryptogramVitilizing the corresponding decryption key and comprising 
the selected token and randomization information; 

recording in an escrow database the generated set of N cryptogram/decryption key 
pairs along with each corresponding Ntoken and the generated cryptogram based on the 
randomly selected cryptogram/decryptionSkey pair; and 

inverting the recorded set of N crWogram/decryption key pairs and the generated 
cryptogram to identify a decryption key fromNhe key escrow database. 

7. (Amended) The method for stomng and withdrawing decryption keys from 
a key escrow database as in Claim 6, further comprising: 

randomly selecting at the receiver one or mVe additional N cryptogram/decryption 
key pairs and corresponding tokens; \ 

decrypting each cryptogram using the corresponding token of the additionally selected 
encryption/decryption key pairs to identify a corresponding decryption key for each 
additionally selected pair; \ 

generating a response cryptogram for each additionally selected 
cryptogram/decryption key pair utilizing the corresponding decryption key and comprising 
the selected additional token(s) and randomization information; anck 

mixing the token information from one selected key pair with the response 
cryptogram from a different selected key pair along with randomisation information to 
diffuse response structure prior to generating another response cryptogram. 
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(Amended) The method for storing and withdrawing decryption keys from 
a key escrowMatabase as in Claim 7, further comprising: 

decryptihe the cryptogram of a cryptogram/decryption key pair using the associated 
decryption key to identify token information. 



9. (Amende^) The method for storing and withdrawing decryption keys from 
a key escrow database in Claim 8 wherein mixing comprises utilization of a linear 
transform. 

10. The method for stating and withdrawing decryption keys from a key escrow 
database as in Claim 8 wherein mixing comprises utilization of a symmetrical cryptosystem. 

1 1 . The method for storing ana\withdrawing decryption keys from a key escrow 
database as in Claim 8 wherein mixing farther comprises utilization of a public key 
cryptosystem. 

12. The method for storing and withdrawing decryption keys from a key escrow 
database as in Claim 6 wherein recording in an escrow\database further comprises encrypting 
the generated set of N cryptogram/decryption key pair\and a response message from the 
receiver prior to recording. 



13. (Amended) The method for storing and withcftawing decryption keys from 
a key escrow database as in Claim 12 further comprising adding signature information to the 
response message to enable valid decodings of the response message\o be distinguished from 
invalid decodings. 
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14. (Amended) A method for secure communication between an originator and 
a receiver Using message encryption, comprising: 

creating at an originator a set of N trap door functions each paired with a 
correspondingtoken, each trap door function comprising a cryptogram/decryption key pair; 
transmitting the set of N trap door functions to a receiver; 

randomly selecting at the receiver one of the trap door functions and the 
corresponding token; 

adding at the receiver randomization information to the corresponding token of the 
selected trap door function^ 

encrypting at the receiver the decryption key with the randomly selected trap door 
function; 

transmitting the encrypt^ decryption key with the randomly selected trap door 
function to the originator; and 

decoding the encrypted decryption key with the randomly selected trap door function 
utilizing originator retained trap door information. 



' 15. (Amended) The method as^n Claim 14 further comprising decrypting at the 

receiver the cryptogram to identify the corresponding token utilizing the decryption key of 
the cryptogram/decryption key pair. 



16. (Amended) The method as in Clami 15 wherein encrypting at the receiver 
an escrow key comprises generating a cryptogram comprising the corresponding token, the 
decryption key and randomization information. 

17. (Amended) The method as in Claim 14 Vherein decoding the encrypted 
escrow key comprises selecting a decryption key randomly from a selected group of 
decryption keys. 



18. (Amended) The method as in Claim 17 further comprising recognizing a 
correct decoding result utilizing structural information embedded in the response message. 
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tQ. (Amended) The method as in Claim 14 wherein creating at an originator 
further comprises generating the set of N trap door functions utilizing a selected encryption 
function and\ private encryption key. 



AckTthe following new claims: 




20. (New)\The method as in Claim 14 further comprising: 

randomly selecting at the receiver an additional trap door function and the 
corresponding token; 

adding randomizaticfcq information to the corresponding token of the additional 
selected trap door function; 

concatenating the resuhA of the adding of the randomization information to the 
corresponding token of the additional selected trap door function to the encryption of the 
randomly selected first trap door function; and 

encrypting the concatenating results using the decryption key from the additional 
selected trap door function pair. 

21. (New) The method as in Claim 14 further comprising adding signature 
information at the receiver to the selected trap aoor function to distinguish valid subsequent 
decodings of the encrypted escrow key from invalicLdecodings. 



22. (New) The method as in Claim 14 further comprising: 

randomly selecting at the receiver one or more Additional trap door functions and 
corresponding tokens; 

decrypting each cryptogram of the selected trap\door functions utilizing the 
corresponding token of the additionally selected trap doo\ functions to identify the 
corresponding decryption key for each additionally selected pair; 

adding at the receiver randomization information to the corresponding token of the 
additionally selected trap door functions; 
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VXencrypting at the receiver an escrow key for each of the additionally selected trap door 
functions, utilizing the corresponding description key and comprising the selected additional 
tokens and\andomization information; and 
mixingvthe token information from one selected trap door function with the encryption 
from a different selected trap door function along with randomization information to diffuse 
response structure prior to encrypting another trap door function. 
23. (New) TheNriethod as in Claim 22 wherein mixing comprises utilization of a 
symmetrical cryptosystem. \ 
24. (New) The methock as in Claim 22 wherein mixing further comprises 
utilization of a public key cryptosystem. 
25. (New) The method as in ClaiVn 22 wherein mixing comprises utilization of a 
symmetrical cryptosystem. \. 

26. (New) The method as in Claim 14 further comprising recording in an escrow 
database the created N trap door functions along witnveach corresponding token and the 
encrypted escrow key with the randomly selected trap doorftinction. 

27. (New) The method as in Claim 26 further composing inverting the recorded 
set of N trap door functions and the encrypted escrow key with the randomly selected trap 
door function to identify a decryption key from the key escrow databases- 
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